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REMARKS 

Claims 1-51 were pending. Claims 5, 7, 22, 24, 39, and 41 have been cancelled. 
Claims 1, 6, 8, 9, 12, 13, 18, 23, 25, 26, 29, 30, 35, 40, 42, 43, 46 and 47 have been 
amended. Accordingly, claims 1-4, 6, 8-21, 23, 25-38, 40, and 42-51 remain pending 
subsequent to entry of the present amendment. 

Statement of Common Ownership 

Both the present application, Serial No. 09/923,588, and application Serial No. 
09/981,607 (now Patent No. 6,760,330), were, at the time the invention was made, 
subject to an obligation of assignment to Sun Microsystems, Inc. An assignment of the 
present application is recorded at Reel 012544, Frame 0688. An assignment of 
application 09/981,607 is recorded at Reel 012274, Frame 0328. 

Claim Objections 

Claims 8, 25, and 42 are objected to as being grammatically incorrect. Applicant 
notes each of these claims are grammatically correct as originally written. However, each 
has also been amended. The present amendments are believed to clarify the recitations. 

Double Patenting Rejection 

Claims 1-51 stand rejected under 103(c) as being an obvious type double 
patenting of Tahan, U.S. Patent No. 6,760,330. Applicant will file a Terminal Disclaimer 
upon an indication that the present application is otherwise in condition for allowance. 
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35 U.S.C. S 102(e) and 35 U.S.C. $ 103(a) Rejections 



In the present Office Action, claims 1, 2, 5-10, 12, 15-16, 18-19, 22-27, 29, 32-33, 
35-36, 39-44, 46, and 49-50 stand rejected under 35 U.S.C. § 102(e) as being anticipated 
by U.S. Patent No. 6,226,748 (hereinafter "Bots"). In addition, claims 3, 1 1, 20, 28, 37, 
and 45 are rejected under 35 U.S.C. § 103(a) as being unpatentable over Bots in view of 
U.S. Patent No. 6,167,052 (hereinafter "McNeill"). Claims 4, 13, 21, 30, 38, and 47 are 
rejected under 35 U.S.C. § 103(a) as being unpatentable over Bots in view of U.S. Patent 
No. 6,085,238 (hereinafter "Yuasa"). Finally, claims 14, 17, 31, 34, 48, and 51 are 
rejected under 35 U.S.C. § 103(a) as being unpatentable over Bots in view of U.S. Patent 
No. 6,266,773 (hereinafter "Kisor"). 

Applicant submits each of independent claims 1,18, and 35 recite a combination 
of features neither taught nor suggested by Bots, or the additionally cited art, either singly 
or in combination. For example, as amended, claim 1 recites a method which includes: 



"determining a first incoming packet community set (PCS) of a first data packet 
received on an interface of said firewall; 

discarding said first data packet in response to detecting said first incoming PCS 
is not a subset of an interface community set (IFCS) of said interface; and 

processing said first data packet in response to detecting said first incoming PCS 
is a subset of said IFCS, wherein said processing comprises: 
matching said first data packet to a first rule of a plurality of rules of said 
firewall; 

comparing said first incoming PCS to a second incoming PCS specified by 
the first rule; and 

changing the first incoming PCS in the first data packet to an outgoing 

PCS specified by the first rule, in response to determining the first 
incoming PCS matches the second incoming PCS ." 
(emphasis added). 



Applicant submits at least the above highlighted features are wholly absent from 
the cited art. In the present Office Action, a VPN group disclosed by Bots is generally 
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equated with the above recited PCS. For example, on page 3 of the Office Action, it is 
suggested that the above recited features "determining ... a PCS of a first data packet 
received on an interface of said firewall" are disclosed by Bots in the following: 

"At decision box 320, it is determined whether or not the source and 
destination addresses for the data packet are both members of the same 
VPN group. This determination may be made with reference to lookup 
tables that are maintained by the VPN units or reference to other 
memory mechanisms." (Bots, col. 7, lines 1-6). 

However, as recited in claim 1 above, a particular approach to processing may be 
performed if the first incoming PCS is a subset of the IFCS. In particular, it is noted that 
the processing includes "comparing said first incoming PCS to a second incoming PCS 
specified by the first rule." Bots nowhere discloses this feature. In contrast, Bots merely 
discloses compression, encryption and authentication rules. Further, the above recited 
processing includes " changing the first incoming PCS in the first data packet to an 
outgoing PCS specified by the first rule, in response to determining the first incoming 
PCS matches the second incoming PCS." These features are not disclosed or suggested 
by Bots. Rather, Bots merely discloses the following (cited by the examiner with respect 
to prior claim 8): 

"Likewise, the VPNU servicing the site where the destination address 
is located will detect that a packet is being propagated between 
members of the same VPN group. The receiving VPNU will handle 
the process of decrypting and authenticating the packet before 
forwarding it toward the destination endstation." (Bots, col. 6, lines 
41-46). 

As already noted above, the present Office Action equates the VPN group 
with the recited PCS. Accordingly, not only does Bots not disclose the above 
recited features, one would not be motivated in Bots to change the VPN group of 
a packet during transit. Therefore, Applicant submits claim 1 is patentably 
distinguished from the cited art for at least the above reasons. As each of 
independent claims 18 and 35 include similar features, claims 18 and 35 are also 
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patentably distinguished from Bots. Applicant has also reviewed McNeill, Yuasa, 
and Kisor, and submits each of the independent claims are patentable in view of 
all of the cited art. As each of the dependent claims include at least the features of 
the independent claims upon which they depend, each of the dependent claims are 
patentable for at least the above reasons. No further discussion of the dependent 
claims is believed necessary at this time. 
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CONCLUSION 

Applicant submits the application is in condition for allowance, and an early 
notice to that effect is requested. 

If any extensions of time (under 37 C.F.R. § 1.136) are necessary to prevent the 
above referenced application(s) from becoming abandoned, Applicant(s) hereby petition 
for such extensions. If any fees are due, the Commissioner is authorized to charge said 
fees to Meyertons, Hood, Kivlin, Kowert, & Goetzel, P.C. Deposit Account No. 
501505/5181-75900/RDR. 

Also enclosed herewith are the following items: 
[X] Return Receipt Postcard 



Meyertons, Hood, Kivlin, 

Kowert, & Goetzel, P.C. 
P.O. Box 398 
Austin, TX 78767-0398 
Phone: (512) 853-8800 

Date: April 22, 2005 



Respectfully submitted, 




Rory D. Rankin 
Reg. No. 47,884 

ATTORNEY FOR APPLICANT(S) 
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